$ rpki-client -vvf repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft File: 4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft (raw, json) Hash identifier: BAHIgIj4WNRD5pAE2w/oGuder87yOtdc6p8Q/CfvCCE= Subject key identifier: C3:E0:F2:B9:6E:82:8F:53:CE:4E:71:C9:4F:7C:66:F2:27:8A:7D:DA Authority key identifier: 4E:E9:59:79:87:55:CD:4B:A4:07:AE:B6:EB:DD:31:00:26:1E:AA:55 Certificate issuer: /CN=4EE959798755CD4BA407AEB6EBDD3100261EAA55 Certificate serial: 4391DC4041D2A4C1722C8A965BF9111A76E5118F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EE959798755CD4BA407AEB6EBDD3100261EAA55.cer Subject info access: rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft Manifest number: 0342 Signing time: Wed 05 Nov 2025 11:02:12 +0000 Manifest this update: Wed 05 Nov 2025 10:57:12 +0000 Manifest next update: Sat 08 Nov 2025 18:56:12 +0000 Files and hashes: 1: 4EE959798755CD4BA407AEB6EBDD3100261EAA55.crl (hash: AUwnF62qI5elueFrma66yLdPiG/Q6kR2LoNuHeKxQj4=) 2: 3130332e3136382e3235312e302f32342d3234203d3e20313432333237.roa (hash: mP3dXLTjkrRr0prh2Jzplj5CirAMZtpiVu7s//8AY3w=) 3: 3130332e3136382e3235302e302f32332d3233203d3e20313432333237.roa (hash: ik9rrWYA9D4GBjhetTFAP4k0XQKOPTBWebSo28sOHb8=) 4: 3130332e3136382e3235302e302f32342d3234203d3e20313432333237.roa (hash: vUWQBZ0/r7vI2v8KbhMfVsf4gR9LmNP6bUrY9mudCfU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.crl rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EE959798755CD4BA407AEB6EBDD3100261EAA55.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 18:56:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:91:dc:40:41:d2:a4:c1:72:2c:8a:96:5b:f9:11:1a:76:e5:11:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4EE959798755CD4BA407AEB6EBDD3100261EAA55 Validity Not Before: Nov 5 10:57:12 2025 GMT Not After : Nov 8 18:56:12 2025 GMT Subject: CN=C3E0F2B96E828F53CE4E71C94F7C66F2278A7DDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:0e:0e:85:ef:05:35:cf:78:cc:5d:ba:f3:ad: 5f:39:ce:41:7c:30:ba:f2:c7:b2:89:80:df:d8:3d: 4c:32:8b:bb:1e:43:86:c9:29:d1:3a:5c:45:88:f4: 2a:d4:72:7d:53:39:a0:7e:bb:b7:ce:22:a9:76:22: 4a:75:e5:ee:d9:ce:c6:b0:db:55:c9:b3:2b:59:0e: 0f:bc:a2:f5:53:39:94:0a:42:55:23:60:04:2c:d4: 79:48:d1:a2:05:cd:3a:e2:5d:1e:a0:7b:53:88:f6: 03:24:25:6e:aa:6c:ba:c3:cb:98:57:30:c8:ca:a9: 83:4e:86:89:b0:dc:99:73:f0:ba:dd:9f:7e:37:d0: 2b:aa:cb:00:e0:1c:e2:2f:9d:8c:e1:b6:ae:30:64: 3f:aa:7c:81:2e:12:23:00:65:e6:9d:d9:2f:a6:cd: 15:87:67:75:22:37:75:cc:c8:c2:e0:79:7f:07:7e: 5e:af:eb:71:26:a8:55:73:fd:cf:8e:05:2a:50:0a: 90:68:bf:2e:c2:d0:25:e2:7c:f6:82:c0:44:f0:64: 75:4a:49:97:07:bc:1b:7a:6e:c4:0b:63:f3:a0:9a: 6d:dd:e0:f6:79:f5:b5:26:6b:b1:3b:8d:49:26:a4: 30:d8:b8:d8:aa:0b:4e:86:ea:17:55:98:a2:d4:61: 56:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:E0:F2:B9:6E:82:8F:53:CE:4E:71:C9:4F:7C:66:F2:27:8A:7D:DA X509v3 Authority Key Identifier: keyid:4E:E9:59:79:87:55:CD:4B:A4:07:AE:B6:EB:DD:31:00:26:1E:AA:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EE959798755CD4BA407AEB6EBDD3100261EAA55.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:67:3a:b3:cc:9b:b9:10:35:9c:80:b2:87:49:c4:d2:c5:6d: df:55:d5:6e:05:3c:00:43:ab:3a:9e:81:ab:57:4f:db:db:c5: 41:f9:96:b6:9e:6d:17:5c:34:f1:33:34:87:b4:1c:1a:72:1e: e8:47:40:39:59:16:e0:cc:2f:ff:8b:82:f5:c1:0c:c1:2e:27: b8:b3:34:35:75:24:23:03:55:9f:82:70:f3:1f:41:dc:60:6d: 6c:c3:00:bd:35:38:2d:bd:d7:7e:a0:7a:d6:83:5b:92:c6:0b: 55:a3:f5:9c:5c:5e:b7:bf:ec:c4:c8:7b:14:8e:9b:a1:99:67: cf:3f:c8:72:54:59:87:4f:4d:ab:8a:94:7d:c0:27:f5:65:18: 21:b2:b0:a8:6c:eb:13:ab:44:cb:eb:88:a4:0d:4d:78:d5:27: d4:2f:04:fc:34:f0:3d:11:17:38:5e:db:8b:d9:d0:cd:57:58: 97:37:08:4c:47:d5:38:14:83:57:4e:81:7d:d5:de:b2:5a:b7: a7:9f:6f:58:b8:1f:4a:0e:94:d7:04:a5:6b:5b:1e:1c:07:ff: 4f:79:76:d0:ac:d7:9e:6c:53:58:8b:09:8f:32:c4:b6:5d:e8: 8a:21:c2:ea:5e:9a:0a:7a:82:d1:fb:fe:ab:e0:0c:2e:b1:e9: 82:11:38:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ5HcQEHSpMFyLIqWW/kRGnblEY8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVFOTU5Nzk4NzU1Q0Q0QkE0MDdBRUI2RUJERDMxMDAy NjFFQUE1NTAeFw0yNTExMDUxMDU3MTJaFw0yNTExMDgxODU2MTJaMDMxMTAvBgNV BAMTKEMzRTBGMkI5NkU4MjhGNTNDRTRFNzFDOTRGN0M2NkYyMjc4QTdEREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbDg6F7wU1z3jMXbrzrV85zkF8 MLryx7KJgN/YPUwyi7seQ4bJKdE6XEWI9CrUcn1TOaB+u7fOIql2Ikp15e7Zzsaw 21XJsytZDg+8ovVTOZQKQlUjYAQs1HlI0aIFzTriXR6ge1OI9gMkJW6qbLrDy5hX MMjKqYNOhomw3Jlz8Lrdn3430CuqywDgHOIvnYzhtq4wZD+qfIEuEiMAZead2S+m zRWHZ3UiN3XMyMLgeX8Hfl6v63EmqFVz/c+OBSpQCpBovy7C0CXifPaCwETwZHVK SZcHvBt6bsQLY/Ogmm3d4PZ59bUma7E7jUkmpDDYuNiqC06G6hdVmKLUYVb/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw+DyuW6Cj1POTnHJT3xm8ieKfdowHwYDVR0j BBgwFoAUTulZeYdVzUukB662690xACYeqlUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MzhkNTgwYi00NTJlLTQyZDctYjA0MS05MDFkYzMzZDY4NTcvMC80RUU5NTk3OTg3 NTVDRDRCQTQwN0FFQjZFQkREMzEwMDI2MUVBQTU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEVFOTU5Nzk4NzU1Q0Q0QkE0MDdBRUI2RUJERDMxMDAyNjFF QUE1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDM4ZDU4MGItNDUyZS00MmQ3LWIw NDEtOTAxZGMzM2Q2ODU3LzAvNEVFOTU5Nzk4NzU1Q0Q0QkE0MDdBRUI2RUJERDMx MDAyNjFFQUE1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHxnOrPMm7kQNZyAsodJxNLFbd9V1W4FPABD qzqegatXT9vbxUH5lraebRdcNPEzNIe0HBpyHuhHQDlZFuDML/+LgvXBDMEuJ7iz NDV1JCMDVZ+CcPMfQdxgbWzDAL01OC29136getaDW5LGC1Wj9ZxcXre/7MTIexSO m6GZZ88/yHJUWYdPTauKlH3AJ/VlGCGysKhs6xOrRMvriKQNTXjVJ9QvBPw08D0R Fzhe24vZ0M1XWJc3CExH1TgUg1dOgX3V3rJat6efb1i4H0oOlNcEpWtbHhwH/095 dtCs155sU1iLCY8yxLZd6Iohwupemgp6gtH7/qvgDC6x6YIROLo= -----END CERTIFICATE-----Generated at Wed Nov 5 20:46:06 2025 by rpki-client